Securing BGP

Anti-Spoofing

Using TLS In Applications

DNSSEC Deployment Maps

The following maps provide a view into global DNSSEC deployment and break the deployment status of top-level domains (TLDs) out into the following five categories:

Experimental – Internal experimentation announced or observed

Announced – Public commitment to deploy

Partial – Zone is signed but not in operation (no DS in root)

DS in Root – Zone is signed and its DS has been published

Operational – Accepting signed delegations and DS in root

These maps are a bit different from other DNSSEC statistics sites in that they contain both factual, observed information (for the “DS in Root” and “Operational” states) and also information based on news reports, presentations and other collected data (the first three states). For more information about how we track the deployment status of TLDs, please read our page on the 5 Stages of DNSSEC Deployment.

The maps and associated data files track both the DNSSEC status of country-code TLDs (ccTLDs), shown in the maps, and also generic TLDs (gTLDs), shown in the comma-separated value (CSV) files.

These maps are produced by the Internet Society Deploy360 Programme based on a database and programs originally developed by Shinkuro, Inc.

NOTE: The boundaries and names shown on this site do not imply the expression of any opinion whatsoever on the part of the Internet Society concerning the legal status of any country, territory, city or area of its authorities. Dotted and dashed lines on maps represent approximate border lines for which there may not yet be full agreement.

TO VIEW THE LATEST MAPS AND CSV FILES, please visit the archives for the dnssec-maps list. The list always has the most up-to-date maps. We periodically update the page below with new maps where there have been significant changes, but the list always has the most recent maps and files.

The individual maps as of 12 December 2016 are (click/tap each map for a larger image):

The maps displayed on this page will be updated periodically as new information becomes available. If you would like to receive the maps whenever new versions are generated each week, you can now subscribe to the “dnssec-maps” mailing list. The most up-to-date maps are always those that are sent to the mailing list.

Please note that additional statistics and maps about DNSSEC deployment may be found from our DNSSEC Statistics page.

Older Versions Of The Maps

Occasional older copies of the maps are retained here for a view into the past.

September 9, 2013

April 3, 2013

An animated map from April 3, 2013, is available to show the progression of DNSSEC deployment over time. Note that the “future” deployment is based upon information Shinkuro had received about plans by various ccTLDs to deploy DNSSEC but as those plans may change the future information should be viewed as a forecast rather than a definitive statement. (And note that the maps above have already changed this view.)

Click/tap on the image below to see a larger image with the animation: